strange spam email xxx with this site as referance?

[bob1xxx]

I will cut and paste the email , but I hope you guys are not selling email addresses to marketers? My old profile went inactive so it would be strange for someone to see it here unless it was solid to someon you though was a legitmate firm?


bob-one@pacbell.net via 209.191.86.190; Tue, 14 Aug 2007 11:16:17 -0700
X-Originating-IP: [65.54.246.241]
Return-Path: <prisca_san@hotmail.fr>
Authentication-Results: mta147.sbc.mail.mud.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig)
Received: from 207.115.20.174 (EHLO flpi134.prodigy.net) (207.115.20.174) by mta147.sbc.mail.mud.yahoo.com with SMTP; Tue, 14 Aug 2007 11:16:17 -0700
X-Originating-IP: [65.54.246.241]
Received: from bay0-omc3-s41.bay0.hotmail.com (bay0-omc3-s41.bay0.hotmail.com [65.54.246.241]) by flpi134.prodigy.net (8.13.8 inb/8.13. with ESMTP id l7EIGGoK001619 for <bob-one@pacbell.net>; Tue, 14 Aug 2007 11:16:16 -0700
Received: from BAY137-W23 ([64.4.48.58]) by bay0-omc3-s41.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Tue, 14 Aug 2007 11:16:17 -0700
Message-ID: <BAY137-W2355ABE9328AEF6C21065183DD0@phx.gbl>
Content-Type: multipart/alternative; boundary="_37577775-2eb5-43af-9430-ef443c000670_"
X-Originating-IP: [196.207.250.124]
From: "Sankor Prisca" <prisca_san@hotmail.fr>
To: "Sankor Prisca" <prisca_san@hotmail.fr>
Subject: Prisca sent you a massage from www.usagiyojimbo
Date: Tue, 14 Aug 2007 18:16:17 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 14 Aug 2007 18:16:17.0504 (UTC) FILETIME=[35145600:01C7DE9F]
Content-Length: 2082
Hello

My name Prisca. I am good looking, humble, respectful, caring , sexy and loving .I saw your profile in www.globalguest.com and it got me interested and i decided to know more about you. kindly get in touch with me through this email: prisca_san@yahoo.com ,So that i can


Honest I be shock if stan would have anything to do with porn spamers (stans a very nice guy met him several times when he'd sign books at the sadly now closed garys coner bookstore), but dark horse Im not so sure. Any how if neither you or dark horse have nothing to do with this I send you the email with the full headers, so maybe you can track the the isp and ask them to stop porting this non sense. please mods pm me when you review this. BTW I never gave my email to globle quest and both my old deleted profile and new have very little information and I ask to NOT have my email available to members Thanks Bob S

[Fanfan]

Thanks to have post the header,

i had a close look, but unfortunately, nothing to say

bob-one@pacbell.net is an email address we can find here :
the address is here
http://usagiyojimbo.com/other/uymember/UYMember2.html
and here :
http://usagiyojimbo.com/other/guestbook ... _1999.html

Perhaps it is the source, but i don't find the address of Steve that received spam too...

GlobalQuest is a ressource for guestbook, but we don't have guestbook on UY.com

The reply address is an hotmail account (no trace on internet)
(it used 2 accounts one yahoo, one hotmail ?)

Only the subject is referring to UY
Subject: Prisca sent you a massage from www.usagiyojimbo

For the rest, i checked the ip that's normal email server...

Google add a link for the original ip address to scamdex, but i can't find anything on this index relative to our problem.

For people using yahoo mail : please refer this email as spam (if hotmail can block spam, please hotmail users do it too)

I'm not so certain the bots are getting it from the site itself anymore. I just got PM'd by a relatively newer member who says the same email was sent to his work email address, which exists only in the DojoList Mailing List! He used his GMail account on the DojoBoard.

hmpfff

Do you both Bob and Steve and Dustykat registered on the mailing list with the same address ? (we only know your email address when you reply to the list)

[Todd Shogun]

Bob,
Our apologies for you receiving this spam. Judging from Fanfan's research, it looks like your address was harvested from the Usagi website by bots. The UYD never sells, nor would ever consider selling, email addresses to spammers. Such an action would be dishonorable to say the least. Additionally, if we were possessed by the demon Jei and decided to do it, anyone could report it to our webhost, forcing the site to be shut down. It simply isn't worth it.

Fanfan, thanks for pointing out where the address resides. This is the first time any spammer has ever mentioned where they got their email address. I don't doubt however that the bots have had their field day with the email addresses of members who joined the Dojo back in the pre-bot era and provided their email addresses. Fortunately most email servers have spam protection to limit how much spam is passed through. My Yahoo address, in service for almost 10 years now, receives thousands of spam emails daily, but are filtered out by Yahoo's spam protection. Unfortunately, the scumbag spammers of the world are constantly finding ways around spam protection and I do receive some spam in my inbox.

I'm going to start going through the Dojo and disable the older stuff with htaccess. This will prevent bots from accessing those pages and harvesting anyone else's email addresses. I doubtr a lot of those old addresses are even active anymore, but apparently some are!

[bob1xxx]

Ok thanks guys for the the information, honest I didnt think you guys were at fault , but some sites Ive got to for years and respected have change their TOS so they can cash in on selling information to spamers. I sent the email with all the headers yahoo provided me so it might help you with the detective work tracking down the fools who were forwarding it around . I considering this as case closed and thanks for the quick reply. Bob S